{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2013-02-22T00:00:00", "descriptions": [{"lang": "en", "value": "The Dell iDRAC6 with firmware 1.x before 1.92 and 2.x and 3.x before 3.42, and iDRAC7 with firmware before 1.23.23, allows remote attackers to bypass authentication and execute arbitrary IPMI commands by using cipher suite 0 (aka cipher zero) and an arbitrary password. NOTE: the vendor disputes the significance of this issue, stating \"DRAC's are intended to be on a separate management network; they are not designed nor intended to be placed on or connected to the Internet.\""}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2013-09-27T09:00:00", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "http://en.community.dell.com/techcenter/systems-management/w/wiki/4929.how-to-check-if-ipmi-cipher-0-is-off.aspx"}, {"tags": ["x_refsource_MISC"], "url": "http://www.wired.com/threatlevel/2013/07/ipmi/"}, {"tags": ["x_refsource_MISC"], "url": "http://www.metasploit.com/modules/auxiliary/scanner/ipmi/ipmi_cipher_zero"}, {"name": "93039", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/show/osvdb/93039"}, {"tags": ["x_refsource_MISC"], "url": "ftp://ftp.dell.com/Manuals/Common/integrated-dell-remote-access-cntrllr-6-for-monolithic-srvr-v1.95_FAQ2_en-us.pdf"}, {"tags": ["x_refsource_MISC"], "url": "http://fish2.com/ipmi/cipherzero.html"}, {"name": "[Freeipmi-devel] 20130222 The Infamous Cipher Zero, I presume?", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "https://lists.gnu.org/archive/html/freeipmi-devel/2013-02/msg00013.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2013-4783", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The Dell iDRAC6 with firmware 1.x before 1.92 and 2.x and 3.x before 3.42, and iDRAC7 with firmware before 1.23.23, allows remote attackers to bypass authentication and execute arbitrary IPMI commands by using cipher suite 0 (aka cipher zero) and an arbitrary password. NOTE: the vendor disputes the significance of this issue, stating \"DRAC's are intended to be on a separate management network; they are not designed nor intended to be placed on or connected to the Internet.\""}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://en.community.dell.com/techcenter/systems-management/w/wiki/4929.how-to-check-if-ipmi-cipher-0-is-off.aspx", "refsource": "MISC", "url": "http://en.community.dell.com/techcenter/systems-management/w/wiki/4929.how-to-check-if-ipmi-cipher-0-is-off.aspx"}, {"name": "http://www.wired.com/threatlevel/2013/07/ipmi/", "refsource": "MISC", "url": "http://www.wired.com/threatlevel/2013/07/ipmi/"}, {"name": "http://www.metasploit.com/modules/auxiliary/scanner/ipmi/ipmi_cipher_zero", "refsource": "MISC", "url": "http://www.metasploit.com/modules/auxiliary/scanner/ipmi/ipmi_cipher_zero"}, {"name": "93039", "refsource": "OSVDB", "url": "http://osvdb.org/show/osvdb/93039"}, {"name": "ftp://ftp.dell.com/Manuals/Common/integrated-dell-remote-access-cntrllr-6-for-monolithic-srvr-v1.95_FAQ2_en-us.pdf", "refsource": "MISC", "url": "ftp://ftp.dell.com/Manuals/Common/integrated-dell-remote-access-cntrllr-6-for-monolithic-srvr-v1.95_FAQ2_en-us.pdf"}, {"name": "http://fish2.com/ipmi/cipherzero.html", "refsource": "MISC", "url": "http://fish2.com/ipmi/cipherzero.html"}, {"name": "[Freeipmi-devel] 20130222 The Infamous Cipher Zero, I presume?", "refsource": "MLIST", "url": "https://lists.gnu.org/archive/html/freeipmi-devel/2013-02/msg00013.html"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2013-4783", "datePublished": "2013-07-08T22:00:00", "dateReserved": "2013-07-08T00:00:00", "dateUpdated": "2013-09-27T09:00:00", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:h:dell:idrac6_bmc:*:*:*:*:*:*:*:*", "matchCriteriaId": "F3F5CD3D-EFF6-41DA-AB2F-FF172F5CD1FC", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "The Dell iDRAC6 with firmware 1.x before 1.92 and 2.x and 3.x before 3.42, and iDRAC7 with firmware before 1.23.23, allows remote attackers to bypass authentication and execute arbitrary IPMI commands by using cipher suite 0 (aka cipher zero) and an arbitrary password. NOTE: the vendor disputes the significance of this issue, stating \"DRAC's are intended to be on a separate management network; they are not designed nor intended to be placed on or connected to the Internet.\""}, {"lang": "es", "value": "El dispositivo iDRAC6 de Dell con versiones de firmware 1.x anteriores a 1.92 y versiones 2.x y versiones 3.x anteriores a 3.42, e iDRAC7 con versi\u00f3n de firmware anterior a 1.23.23, permite a los atacantes remotos omitir la autenticaci\u00f3n y ejecutar comandos IPMI arbitrarios usando el conjunto de cifrado 0 (tambi\u00e9n se conoce como cifrado cero) y una contrase\u00f1a arbitraria. NOTA: el proveedor cuestiona la importancia de este problema, declarando que \"Los DRAC est\u00e1n destinados a estar en una red de administraci\u00f3n separada; no est\u00e1n dise\u00f1ados ni destinados a ser conectados o conectados a Internet\"."}], "id": "CVE-2013-4783", "lastModified": "2013-09-27T03:47:07.290", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2013-07-08T22:55:01.137", "references": [{"source": "cve@mitre.org", "url": "ftp://ftp.dell.com/Manuals/Common/integrated-dell-remote-access-cntrllr-6-for-monolithic-srvr-v1.95_FAQ2_en-us.pdf"}, {"source": "cve@mitre.org", "url": "http://en.community.dell.com/techcenter/systems-management/w/wiki/4929.how-to-check-if-ipmi-cipher-0-is-off.aspx"}, {"source": "cve@mitre.org", "url": "http://fish2.com/ipmi/cipherzero.html"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/show/osvdb/93039"}, {"source": "cve@mitre.org", "url": "http://www.metasploit.com/modules/auxiliary/scanner/ipmi/ipmi_cipher_zero"}, {"source": "cve@mitre.org", "url": "http://www.wired.com/threatlevel/2013/07/ipmi/"}, {"source": "cve@mitre.org", "url": "https://lists.gnu.org/archive/html/freeipmi-devel/2013-02/msg00013.html"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-287"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}